Allow to choose if extractable or not

test/kdf.test.ts

@@ -74,7 +74,9 @@ describe('ECDH', () => {
         const k2 = await PrivateWrap.gen_keypair()
 
         const kd1 = await ecdh(k1.privateKey, k2.publicKey)
+        expect(kd1.extractable).toBe(false)
         const kd2 = await ecdh(k2.privateKey, k1.publicKey)
+        expect(kd2.extractable).toBe(false)
 
         expect(kd1).toEqual(kd2)
     })

test/signature.test.ts

@@ -5,6 +5,8 @@ import {derive_keypair, gen_keypair, sign, verify} from "../src/signature";
 
 test('base case', async () => {
     const keypair = await gen_keypair()
+    expect(keypair.privateKey.extractable).toBeTrue()
+    expect(keypair.publicKey.extractable).toBeTrue()
     const data = new TextEncoder().encode("Message 123 !")
 
     const sig = await sign(data, keypair.privateKey)
@@ -13,6 +15,20 @@ test('base case', async () => {
     expect(verification).toBe(true)
 })
 
+test('extractable or not', async () => {
+    const kp1 = await gen_keypair()
+    const kp2 = await gen_keypair(true)
+    const kp3 = await gen_keypair(false)
+
+    expect(kp1.privateKey.extractable).toBeTrue()
+    expect(kp2.privateKey.extractable).toBeTrue()
+    expect(kp3.privateKey.extractable).toBeFalse()
+
+    expect(kp1.publicKey.extractable).toBeTrue()
+    expect(kp2.publicKey.extractable).toBeTrue()
+    expect(kp3.publicKey.extractable).toBeTrue()
+})
+
 test('inverted keys', async () => {
     const keypair = await signature.gen_keypair()
     const data = new TextEncoder().encode("Message 123 !")